Pharo browser Git traffic can pass through a CORS proxy
Iceberg and Metacello requests, including push tokens, are visible to the proxy the user selects.
Stories per day · 30 days
2 RSS
Relatedcranelift2sandbox-escape2wasmtime2ai1akamai1anomaly-detection1bytecode-alliance1cloudflare1contra1copyright1cors1credentials1decompilation1edge-computing1game-port1games1git1hacker-news1
14 stories, newest first · one card per story
Stories tagged #webassembly
Akamai says WebAssembly fits AI as Functions reaches general availability
The post also says Akamai Agent Sandbox is coming to Spin, but the supplied body is cut off.
NES Contra (1987) port to WebAssembly
A native port of the 1987 NES game Contra is now running in the browser via WebAssembly.
Wasmtime sandbox escape flaws patched in Cranelift
The supplied page text gives no CVEs, versions, or exploitation status for the Cranelift fixes.
Two critical Wasmtime flaws let malicious WebAssembly modules escape the sandbox
CVE-2026-115889 affects every architecture and CVE-2026-115893 only ARM64; fixes landed October 19–20 with no attacks reported.
2
WADE flags anomalous WebAssembly behavior with per-app LSTM models
On 67 Wasm apps and ten vulnerability classes, the authors report zero false negatives and a 0.42% false positive rate.
AI is mass decompiling games. That's both awesome and scary.
AI decompilation is reconstructing commercial games, aiding preservation while raising fears of software reuse.
Protecting CPU AI On Edge TEEs: WebAssembly's Promise and Practical Challenges
OP-TEE runs unaltered WebAssembly AI models on Arm TrustZone with 22% overhead and 6% extra latency.
pwasm 0.2a0
Simon Willison shipped pwasm 0.2a0, a pure-Python WebAssembly engine largely improved by Claude Opus 5.5.
Supporting native Rust in Workers with the new Emscripten target for wasm-bindgen
Cloudflare previews Emscripten support in wasm-bindgen so native Rust and Tokio can run on Workers.
5
Python Workers are now generally available
Cloudflare made Python Workers generally available, adding native platform bindings plus FastAPI, Django, and Flask support without JavaScript glue code.
4
Verifiable Computation with Trusted Execution Environments and On-Chain Digital Rights Tokens
Researchers propose TEE-sealed data pools with on-chain Digital Rights Tokens so analysts run code without seeing underlying data.
Google fixes the seventh actively exploited Chrome zero-day of 2026
Google patched 230 Chrome flaws in version 153.0.8010.36, including actively exploited V8 out-of-bounds write CVE-2026-87491 (CVSS 8.8), the seventh 2026 Chrome zero-day.
Video compressor
Simon Willison built a browser-based video compressor using the WebAssembly FFmpeg build, generated by Claude Fable 5.1 in Claude Code for web.